MetaSlider — Vulnerabilities & Security Advisories 5

Metaslider is a WordPress plugin for creating image sliders and carousels. Historically, it has been vulnerable to multiple security issues including cross-site scripting (XSS), remote code execution (RCE), and privilege escalation vulnerabilities. These flaws often stem from insufficient input validation and improper permission checks. The plugin has accumulated five CVEs to date, with some allowing unauthenticated attackers to execute arbitrary code or steal sensitive data. While no major public incidents have been widely documented, the consistent pattern of vulnerabilities suggests potential risks for unpatched installations, particularly those running outdated versions where these issues remain unaddressed.